Privacy and Fundamental Rights at Work
- Lesson 16 of 23
- Core
- 17 min
- Reviewed
By James R. GosnellEducational material, not legal advice.
Key points
Employees retain privacy and other fundamental rights during employment, and intrusive supervision requires a legally sufficient justification. The legality of collecting information, its admissibility as evidence and the remedies for an infringement must each be assessed separately.
Overview
An employer may supervise work, investigate misconduct and protect people without acquiring control over every aspect of an employee’s life. (vie privée) continues during employment, including when the employee uses equipment supplied by the employer. The legal analysis depends on what information or conduct is examined, the justification for examining it and the means chosen.
Workplace disputes often engage several protections together. A camera may reveal little intimate information yet impose degrading working conditions through continuous observation. A medical questionnaire may assist attendance management while collecting unnecessary health information. A recording may establish misconduct despite having been obtained unlawfully. Each issue requires its own conclusion.
This lesson addresses Quebec employment relationships and the interaction of fundamental rights, supervision and . Specific occupational injury procedures, discrimination remedies and collective bargaining rules also matter where their conditions apply. Federal employment and governmental action require attention to their distinct statutory and constitutional frameworks.
Learning Objectives
- Apply the contextual test for privacy and the employer’s justification of an intrusion.
- Distinguish ordinary supervision, intrusive investigation, biometric identification and substance testing.
- Separate the legality of collection, of evidence, evidentiary weight and available remedies.
Rights that continue during employment
Identify the right and its legal effect
The Quebec Charter of human rights and freedoms protects integrity, (liberté d’expression), (dignité), reputation, privacy and the inviolability of the home through sections 1, 3, 4, 5 and 7. protects reputation and privacy; identifies possible intrusions, including interception of private communications and surveillance of private life. The list is not exhaustive.
These protections operate alongside the employment contract. (droits de direction), reflected in , permit direction and control of the employee’s work. requires appropriate measures to protect the employee’s health, safety and dignity. Neither provision creates an unlimited investigative power. The employer must explain why a particular measure is needed to perform its responsibilities.
Section 46 of the Quebec Charter concerns fair and reasonable working conditions consistent with health, safety and physical integrity, in accordance with law. Its scope includes persons who work beyond the usual employee category. It does not independently authorize invalidation of legislation or create every claimed working condition. Identify the statutory or contractual protection being applied. Section 53 supports interpretation consistent with the Charter where genuine doubt exists. Section 52 gives precedence to sections 1 to 38, subject to an express statutory derogation; section 46 does not receive that same precedence.
Expression, dignity and health information
Employees retain freedom of expression when criticizing workplace organization or engaging in lawful union activity. The duty of loyalty under does not erase this protection. Conversely, expression does not immunize defamatory allegations, threats or unjustified disclosure of confidential information. Examine the actual words, audience, context and demonstrated harm before treating criticism as misconduct.
Dignity also constrains the manner of investigation and dismissal. Publicly branding someone a thief without a proper investigation can cause a distinct injury even if an employer had grounds to inquire. Necessary safety information should be communicated to those who require it, without gratuitous humiliation.
A medical inquiry must address a legitimate employment question, such as functional capacity or an accommodation need. A justified inquiry does not automatically permit the complete medical history, unrelated family details or employer control over treatment. Before requesting documentation, check the applicable absence regime: Quebec labour standards prohibit supporting-document demands for the first three absence periods of three consecutive days or less within twelve months for the covered absences. Occupational injuries follow a different regime. CNESST: illness or accident unrelated to work.
Assess the intrusion before the justification
Expectations and consent are contextual
A (attente raisonnable de vie privée) depends on the information, location, participants and workplace practices. A shared production area differs from a closed room used for a personal conversation. A public location does not extinguish every privacy interest: systematic tracking can reveal a private pattern that an isolated observation would not disclose.
In Godbout c. Longueuil (Ville de), [1997] 3 R.C.S. 844, the Supreme Court rejected the assumption that accepting a residence requirement to obtain permanent employment necessarily represented a freely chosen waiver. A signature obtained through an inequitable choice must be examined in context. The employment contract itself is not a blanket waiver, and union agreement cannot simply surrender employees’ personal privacy rights.
In R. c. Cole, 2012 CSC 53, the Supreme Court recognized a privacy interest in personal information on a work computer despite employer ownership and workplace policies. The case concerned police access and the Canadian Charter. Its contextual reasoning helps explain why ownership alone does not resolve a Quebec employment dispute; the applicable legal regime still requires separate analysis. Supreme Court judgment.
Justification and proportionality
First establish whether the contested conduct enters a protected private sphere. Then examine any alleged valid consent and its precise scope. If an intrusion remains, the employer seeking justification under section 9.1 of the Quebec Charter bears the corresponding burden.
Ste-Marie c. Placements JPM Marquis inc., 2005 QCCA 312, paragraph 27, sets out the relevant requirements: a legitimate and important objective, a rational connection between the measure and that objective, and the absence of other reasonable means, with the intrusion restricted as much as possible. (proportionnalité) requires evidence about the chosen method, not merely an appealing objective.
Identify what the employer knew before acting. Then compare the proposed measure with practical alternatives and specify its duration, field of observation, access restrictions and stopping condition. An investigation that unexpectedly finds wrongdoing cannot manufacture its original justification afterwards. Even when privacy expectations are limited, dignity and fair working conditions remain relevant.
Supervision, cameras and communications
Match the means to the documented problem
Video surveillance may respond to substantiated theft, vandalism, safety hazards or protection of valuable property. Continuous observation of workers’ movements or productivity demands a specific justification. Assess camera orientation, recording duration, sound capture, remote access and whether existing supervision could resolve the problem with less interference.
The original purpose also constrains later use. Security footage does not become a general disciplinary archive simply because it exists. A different use requires analysis of its justification and the governing information rules. Cameras used by a client or resident require attention to who controls them and who can see the images; their presence alone does not establish employer surveillance.
Worked example: theft prevention becomes productivity monitoring
Factual Scenario
A parts distributor documents repeated theft from a locked storage area. After access controls fail, it installs a camera directed at the storage entrance. A manager subsequently redirects it toward a packing employee for an entire shift to record pauses, although no performance concern was previously documented.
The theft evidence and failed access controls can support the original security purpose. Its necessity still depends on the area filmed and available alternatives. Redirecting the camera creates a different measure: prolonged observation of an identifiable employee to assess productivity.
The employer must justify that new purpose and method. The original theft investigation supplies no automatic reason to record the employee’s entire shift. Ordinary supervision, task records or a discussion of actual performance concerns could be less intrusive. Continuous scrutiny also engages dignity and working conditions even if the packing area contains little intimate information.
Conclusion. The facts support distinguishing a potentially justified security installation from an unjustified expansion. Any disciplinary reliance on the second recording requires a separate evidentiary analysis; a genuine theft problem does not validate every camera use.
Digital activity and recordings
An Internet policy should explain permitted uses, monitoring and consequences. Personal use that materially deprives the employer of work may justify discipline, but duration, repetition, prior tolerance, warnings, dishonesty and the employee’s record affect the sanction. A few personal messages and systematic diversion of working time require different assessments.
Private email remains capable of protection on an employer’s device. Limit an authorized search to its legitimate subject. A social-media account also requires contextual analysis: privacy settings, the intended audience and the actual method of obtaining access matter. Deception used to penetrate a restricted account can make the intrusion serious. The number of contacts is not a universal legal threshold.
Recording conversations raises additional questions. Section 184 of the Criminal Code contains the interception prohibition and exceptions, including participant consent. An exception to criminal liability does not resolve Quebec privacy rights, employment obligations or evidentiary admissibility. Secretly leaving a recorder to capture other people’s private conversations presents a different situation from recording a conversation in which the employee participates. Criminal Code, section 184.
Personal information and biometric systems
Follow the information through its uses
Personal information (renseignement personnel) includes identifiable video, communications and health information. The Act respecting the protection of personal information in the private sector and the Act respecting Access to documents held by public bodies and the Protection of personal information establish distinct applicable regimes. Determine the employer’s status and the nature of the information before choosing between them.
Under section 5 of the private-sector Act and , collection must remain limited to necessary information. Consent does not cure unnecessary collection. Define the purpose before collecting, explain the required information to the employee, and distinguish initial collection from subsequent use and disclosure. Section 8 of the private-sector Act governs information supplied at collection; section 20 limits internal access without consent to authorized personnel who need the information for their functions. CAI guidance on collection.
Subject to statutory exceptions, an employee can request access and rectification; section 27 of the private-sector Act addresses access. A manager’s interest in attendance does not mean every supervisor needs the diagnosis. Nor does outsourcing storage authorize unrestricted sharing. A new purpose requires its own necessity and consent analysis or an applicable statutory exception. Retain and protect information according to the governing rules, rather than keeping an indefinite archive for hypothetical future disputes. CAI guidance on use and communication.
Biometrics require additional safeguards
(biométrie), such as fingerprint or facial identification, involve distinctive personal characteristics. Administrative convenience does not establish necessity where ordinary access cards would adequately achieve the purpose.
Sections 44 and 45 of the Act to establish a legal framework for information technology impose additional rules. Identity verification using biometric capture requires prior disclosure to the Commission d’accès à l’information and (consentement exprès). Collection must be limited to the minimum characteristics needed. Unrelated information revealed through those characteristics cannot become a basis for employment decisions. The biometric record and related notes must be destroyed when their legally defined identification purpose is accomplished or no longer exists.
Creation of a biometric database must be disclosed diligently, no later than sixty days before it enters service. Disclosure is not approval of the system’s legality. The Commission can regulate, suspend or prohibit the database and order its destruction. An alternative identification method must allow employees to refuse biometric collection without an illusory choice. The project must also satisfy applicable privacy-assessment obligations. CAI: biometrics.
Searches and surveillance outside work
Demand reasons established before the investigation
Section 24.1 of the Quebec Charter protects against unreasonable searches. A policy authorizing inspection of personal effects requires a legitimate scope and fair application. Serious theft concerns may justify a targeted search after reasonable alternatives are considered; a general power to search everyone anywhere at any time is excessive. Refusing a lawful search may have disciplinary consequences, but the employer cannot physically compel submission.
(filature) during medical leave is exceptional. In Syndicat des travailleuses et travailleurs de Bridgestone/Firestone de Joliette (C.S.N.) c. Trudeau, [1999] R.J.Q. 2229 (C.A.), the Court required serious pre-existing grounds, necessity and minimally intrusive means. Medical disagreement, cost concerns or a general desire to detect dishonesty do not automatically establish those requirements. Assess the reliability of the information and possible medical clarification before choosing surveillance.
Worked example: an outing during medical leave
Factual Scenario
An employee on leave for a back condition posts a photograph from a public garden. The employer knows only that the employee cannot currently perform repeated heavy lifting. Without asking about the photograph’s date or considering the medical restrictions, it orders extended surveillance, including filming through a home window.
A photograph of an outing does not establish incompatibility with the restrictions described. It may be old, and walking may be compatible with recovery. The employer lacks a demonstrated contradiction that would support the proposed investigation. Later images cannot retrospectively supply missing grounds.
The chosen means create an additional problem. Extended tracking and filming inside the home intrude far beyond observing a specific alleged activity in public. Less intrusive clarification must be considered. Even an admissible image of one physical movement would not establish capacity for repeated lifting throughout a shift. Medical context connects an observed activity to the actual demands of employment.
Conclusion. Both the initial justification and the means are deficient on these facts. The tribunal must separately address exclusion and the weight of any evidence admitted. Attendance at a garden does not itself prove dishonesty or fitness for the employee’s regular duties.
Alcohol, drug testing and accommodation
Individual testing differs from a random programme
Testing can affect integrity, dignity, privacy and equality. In Section locale 143 du Syndicat canadien des communications, de l’énergie et du papier c. Goodyear Canada inc., 2007 QCCA 1686, the Court distinguished testing based on individual circumstances from (dépistage aléatoire). Reasonable grounds of impairment, a sufficiently connected workplace accident, or a properly structured rehabilitation arrangement can justify individual testing. An accident does not mechanically justify every test.
In Syndicat canadien des communications, de l’énergie et du papier, section locale 30 c. Pâtes & Papier Irving, Ltée, 2013 CSC 34, the Supreme Court upheld the arbitral rejection of unilaterally imposed random alcohol testing on the record before it. A dangerous unionized workplace alone did not establish the enhanced risk needed to justify that policy. Examine evidence of a workplace substance problem, less intrusive measures and the policy’s actual reach. Supreme Court judgment.
Worked example: a new random-testing policy
Factual Scenario
A unionized manufacturer classifies several jobs as dangerous and announces random drug testing with automatic dismissal after a positive result. It identifies no workplace consumption problem. One employee has a documented dependency and requests a rehabilitation arrangement.
The dangerous work supports taking safety seriously, but it does not establish the necessity of random testing. The employer must connect its policy to demonstrated risks and explain why less intrusive measures are inadequate. A test’s ability to reveal prior consumption also differs from its ability to establish impairment while working.
Sections 10 and 16 of the Quebec Charter require consideration of disability discrimination. A dependency can trigger (accommodement raisonnable), subject to undue hardship and the employee’s cooperation. The employer must assess that employee’s circumstances rather than apply automatic dismissal without examining the relationship between the disability and the conduct.
Conclusion. The policy’s general justification and individual consequences both require revision. A supported, proportionate return-to-work arrangement may include testing, but its conditions must respect privacy and equality. Labelling an agreement a last chance does not eliminate public-order protections.
Stewart c. Elk Valley Coal Corp., 2017 CSC 30, illustrates why the disability connection must be proved: the Supreme Court accepted as reasonable a tribunal’s finding that the employee could comply with the disclosure policy and was dismissed for its breach. That fact-specific result does not authorize automatic dismissal whenever a dependent employee breaches a rule. Foreign transport requirements likewise require proof of their actual application; they do not establish a universal Quebec testing regime.
Evidence, remedies and the proper forum
Keep legality, admissibility and weight separate
Admissibility (recevabilité) under requires separate consideration of an infringement of fundamental rights and whether using the evidence would bring the administration of justice into disrepute. The tribunal must address the rule even on its own initiative. Relevance alone does not settle the issue, and an unlawful intrusion does not produce automatic exclusion.
Mascouche (Ville de) c. Houle, [1999] R.J.Q. 1894 (C.A.), illustrates exclusion following serious intrusion into private telephone conversations at home. The gravity of the breach, circumstances of collection and effect of admitting the material require reasoned assessment. An investigator’s testimony or an expert opinion derived from excluded footage may also be affected.
generally requires separate proof of authenticity for recorded statements. Where the recording is a technology-based document, however, that proof is required only in the case covered by section 5, paragraph 3, of the Act to establish a legal framework for information technology: the medium or technology does not allow its integrity to be confirmed or denied. Preserve the original recording, its date, participants and context, and allow meaningful examination by the opposing party. (valeur probante) remains distinct: an authentic recording may prove very little about the disputed work capacity or alleged misconduct.
Match the remedy to jurisdiction
In a unionized workplace, a grievance arbitrator can apply fundamental rights within the grievance’s scope, invalidate an unjustified policy and award available damages. Ordinary courts may hear non-unionized civil claims within their jurisdiction. The Commission d’accès à l’information has its own information-protection and access functions. A generic privacy allegation does not place every dispute before the Human Rights Tribunal; its statutory jurisdiction and access procedure must be established.
Section 49 of the Quebec Charter supports cessation of an unlawful interference and compensation for resulting injury; an unlawful and intentional interference can also justify punitive damages. Admission of evidence does not erase liability for obtaining it unlawfully. Identify the injured person, the loss and the respondent’s conduct. Where occupational injury compensation is engaged, examine its effect on civil remedies before cumulating claims. Preserve applicable grievance and statutory deadlines promptly.
Practice Checklist
- Identify the employer’s regime, protected right, information and competent decision-maker.
- Establish the employee’s privacy expectation and the scope of any valid consent.
- Record the employer’s grounds before the intrusion and assess reasonable alternatives.
- Examine duration, location, recording, access, retention and any change of purpose.
- Apply biometric, medical-information and disability protections where relevant.
- Separate collection legality, exclusion, authenticity, evidentiary weight and damages.
- Preserve original records and applicable procedural deadlines.
Check your understanding
Two short exercises before you move on: reason through the lesson’s worked examples, then recall its key terms from memory.
Apply the rules
Each worked example gives the facts first and keeps its analysis closed. Decide the outcome, then open the analysis to compare.
Active recall
1 / 14Formulate your answer before revealing the definition. Your self-assessment schedules a review; it does not measure mastery.
privacy
vie privée
How would you define this concept? Which conditions or limits matter?
Glossary
- admissibilityrecevabilité
- The legal acceptability of introducing material as evidence before a decision-maker.
- biometricsbiométrie
- Identification or authentication through distinctive physical, biological or behavioural characteristics.
- covert surveillancefilature
- Following or observing a person without that person’s knowledge to gather information about activities.
- dignitydignité
- The respect owed to a person’s inherent worth, including in working conditions and employer conduct.
- express consentconsentement exprès
- Explicit agreement to a specified act, rather than agreement inferred solely from circumstances.
- freedom of expressionliberté d’expression
- The protection of communicating ideas and opinions, subject to legally justified limits.
- management rightsdroits de direction
- The employer’s authority to organize and supervise work within legal and contractual limits.
- personal informationrenseignement personnel
- Information concerning a natural person that identifies that person directly or indirectly.
- privacyvie privée
- The protected sphere of personal autonomy, intimacy and confidential information.
- probative valuevaleur probante
- The weight evidence deserves in proving or disproving a disputed fact.
- proportionalityproportionnalité
- An assessment connecting a legitimate objective to necessary means and the limits placed on an intrusion.
- random testingdépistage aléatoire
- Testing selected individuals without an individualized triggering incident or reasonable suspicion.
- reasonable accommodationaccommodement raisonnable
- Adjustments required to address disability or another protected characteristic up to undue hardship.
- reasonable expectation of privacyattente raisonnable de vie privée
- A privacy expectation assessed objectively in the full context of the information, activity and relationship.
References and Further Reading
- JurisClasseur Québec, collection « Droit du travail », Rapports individuels et collectifs du travail, , « Protection de la vie privée et des droits fondamentaux », sections I and II.
- Charter of human rights and freedoms, sections 1, 3, 4, 5, 7, 9.1, 10, 16, 24.1, 46, 49, 52 and 53; .
- Act respecting the protection of personal information in the private sector, sections 5, 8, 20 and 27; Act respecting Access to documents held by public bodies and the Protection of personal information; Act to establish a legal framework for information technology, sections 5 (third paragraph), 44 and 45; Criminal Code, section 184.
- Godbout c. Longueuil (Ville de), [1997] 3 R.C.S. 844; Ste-Marie c. Placements JPM Marquis inc., 2005 QCCA 312; R. c. Cole, 2012 CSC 53.
- Syndicat des travailleuses et travailleurs de Bridgestone/Firestone de Joliette (C.S.N.) c. Trudeau, [1999] R.J.Q. 2229 (C.A.); Mascouche (Ville de) c. Houle, [1999] R.J.Q. 1894 (C.A.).
- Section locale 143 du Syndicat canadien des communications, de l’énergie et du papier c. Goodyear Canada inc., 2007 QCCA 1686; Syndicat canadien des communications, de l’énergie et du papier, section locale 30 c. Pâtes & Papier Irving, Ltée, 2013 CSC 34; Stewart c. Elk Valley Coal Corp., 2017 CSC 30.